I've enabled universal passwords, created and assigned the policy. It's
setup to sync with the nds password but not remove the nds password.
Some users nds passwords don't seem to be syncing or at least creating their
universal password based on their nds password and on others it has been
working fine. All users are in the same tree and using the same password
policy. I've checked to make sure that the user does have the policy
associated and it does. The only way to get the universal password created
or synced with the nds password for these trouble user accounts is to use
the 'Set Universal Password' in iManager.
The other question i have is what password rules take precedence if the
universal password is enabled? In other words, if i set the nds password to
expire every 60 days and the universal password is set to expire every 90
days - what happens?